DATA-STEALING CHROME EXTENSIONS IMPERSONATE FORTINET, YOUTUBE, VPNS

Summary from the TLDR InfoSec newsletter

Researchers at DomainTools identified a malware campaign that uses a collection of over 100 malicious websites offering fake VPNs or masquerading as legitimate services to trick users into installing Chrome extensions. The extensions serve different malware variants, such as info stealers and backdoors. DomainTools reported the malicious extensions to Google Chrome, which removed some but not all of them.